CVE-2015-0749

creationtimestamp| type| source ---|---|--- 2020-02-19 07:52:18+00:00| seen| https://t.me/cibsecurity/9913...

CVE-2015-0749

Cisco Unified Communications Manager is affected by a cross-site scripting (XSS) vulnerability due to improper input validation of certain parameters. An unauthenticated, remote attacker could lure a user to follow a malicious link, potentially allowing the attacker to execute arbitrary script co...

CVE-2015-9543

OpenStack Nova up to 18.2.4, 19.x up to 19.1.0, and 20.x up to 20.1.0 is vulnerable to leaking consoleauth tokens into log files when using novncproxy. The issue is tied to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py. A user with read access to the service logs c...

CVE-2015-7507

CVE-2015-7507 affects Libnsbmp 0.1.2. Connected sources confirm a DoS via an out-of-bounds read triggered by a crafted color table in bmp_decode_rgb/bmp_decode_rle, with Libnsbmp described as a C decoding library for BMP/ICO. Public details also reference a heap overflow/vulnerabilities in this v...

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

CVE-2015-7567

Summary: CVE-2015-7567 is a SQL injection vulnerability in Yeager CMS 1.2.1 that allows remote attackers to execute arbitrary SQL via the "passwordreset&token" parameter. The issue stems from improper input handling in the authentication/password reset flow (root cause: unsafely constructed SQL f...

Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2015-7450)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixe...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-7506

The gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a crafted LZW stream in a GIF file...

CVE-2015-7506

The CVE-2015-7506 entry concerns Libnsgif, a GIF decoding library. A vulnerability in the function gif_next_LZW in libnsgif.c (Libnsgif 0.1.2) allows context-dependent attackers to cause a denial of service via a crafted LZW stream in a GIF file, via an out-of-bounds read that crashes the applica...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-6970

CVE-2015-6970 affects Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 firmware 4.54.0026. The web interface is vulnerable to XML injection via the idstring parameter to rcp.xml, enabling remote attackers to tamper or extract data. Public exploit references (Exploit-DB) doc...

CVE-2015-1425

JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities...

CVE-2015-1425

JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities...

CVE-2015-1425

Technical details (affected products, vulnerable components, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from vendors, NVD, or advisories to obtain concrete information.

Ubuntu: Security Advisory (USN-4279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-8751

Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation...

CVE-2015-8751

CVE-2015-8751 affects JasPer/JasPer’s jas_matrix_create function. The connected sources confirm an integer overflow in this path, triggered while processing certain JPEG 2000 images, related to memory allocation. Reported impact includes potential remote code execution or denial of service, as do...

CVE-2015-5216

The Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via an HTTP response...